CVE-2007-1861: Linux Kernel

Medium severity, CVSS 4.9. EPSS: 1% chance of exploitation in the next 30 days.

The nl_fib_lookup function in net/ipv4/fib_frontend.c in Linux Kernel before 2.6.20.8 allows attackers to cause a denial of service (kernel panic) via NETLINK_FIB_LOOKUP replies, which trigger infinite recursion and a stack overflow.

Affected products

• Linux Linux Kernel: up to and including 2.6.20.8; version 2.6.0 only; version 2.6.1 only; version 2.6.2 only; version 2.6.3 only; version 2.6.4 only; …

Published 2007-05-07. Last modified 2026-06-16.